Article 17 - Requirement to record operations and notify the QFC Authority

(1) A Data Controller must establish and maintain a record of all wholly or partly automatic Personal DataProcessing operations or set of such operations intended to secure a single purpose or several related purposes.
(2) The QFC Authority may make Rules prescribing:
(A) the information in relation to Personal DataProcessing operations that must be recorded for the purposes of Article 17(1);
(B) the circumstances in which a Data Controller must notify the QFC Authority of any operations referred to in Article 17(1); and
(C) the content of any such notification.